9803 matches found
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: mycli, airflow-core, label-studio, openstack-glance-2026.1-fips, pgadmin4-fips, datahub-ingestion-fips, openstack-placement-2026.1-fips, superset, airflow, pgadmin4, openstack-horizon-2025.1, openstack-nova-2025.2, openstack-horizon-2026.1-fips,...
CVE-2026-76878: Function Call With Incorrect Variable or Reference as Argument
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the allprojects query parameter is set to false. The API checks for the presence of the allprojects key rather than its value; a true value enforces the administrator-only policy, but a false value removes the key a...
PT-2026-78838
Name of the Vulnerable Software and Affected Versions OpenStack Aodh versions prior to 22.0.1 OpenStack Watcher versions 4.0.0 and later Description In OpenStack Aodh, the alarm list API fails to properly enforce project scoping when the all projects query parameter is set to false. The system...
Debian dsa-6452 : designate - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6452 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6452-1 [email protected] https://www.debian.org/securit...
CVE-2026-71194
A flaw was found in the OpenStack Designate mDNS NOTIFY handler. The handlenotify method performs zone lookups without poolid scoping, unlike the QUERY and AXFR handlers which were previously updated to be pool-aware. When zones with the same name exist across different DNS pools, the storage lay...
CVE-2026-71193
A flaw was found in OpenStack Designate. When the AttributeFilter scheduler is enabled with multiple DNS pools, an authenticated tenant can bypass zone ownership checks by scheduling a zone to a different pool. The database uniqueness constraint on zone names is pool-scoped, and the...
[SECURITY] [DLA 4743-1] ironic security update
Debian LTS Advisory DLA-4743-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara August 16, 2026 https://wiki.debian.org/LTS Package : ironic Version : 1:21.4.4-0+deb12u2 CVE ID : CVE-2026-43003 CVE-2026-54421 Debian Bug : 1140012 1140187 1144214 Multipl...
Debian Security Advisory 6445-1
Debian Linux Security Advisory 6445-1 - Multiple security vulnerabilities were discovered in Ironic, the OpenStack component to management and provision of baremetal servers, which could result in bypass of administrative access/API restrictions, information disclosure or the execution of arbitra...
[SECURITY] [DSA 6444-1] neutron security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6444-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 16, 2026 https://www.debian.org/security/faq -...
Debian dsa-6444 : neutron-api - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6444 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6444-1 [email protected] https://www.debian.org/security/ Moritz...
EUVD-2026-58824
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
Linux Distros Unpatched Vulnerability : CVE-2026-74248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an...
Linux Distros Unpatched Vulnerability : CVE-2026-74250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect...
DEBIAN-CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
UBUNTU-CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
